Overview

overview

7

Static

static

3

p02fPXv.rar

windows7-x64

3

p02fPXv.rar

windows10-2004-x64

7

config.toml

windows7-x64

3

config.toml

windows10-2004-x64

3

data/asset...g.json

windows7-x64

3

data/asset...g.json

windows10-2004-x64

3

data/asset...d.json

windows7-x64

3

data/asset...d.json

windows10-2004-x64

3

main.exe

windows7-x64

7

main.exe

windows10-2004-x64

7

output/fil...ha.txt

windows7-x64

1

output/fil...ha.txt

windows10-2004-x64

1

output/fil...id.txt

windows7-x64

1

output/fil...id.txt

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    p02fPXv.rar

  • Size

    17.4MB

  • Sample

    240212-2vkejadg4v

  • MD5

    2244f05940898c038b1a5b0165671926

  • SHA1

    86e2b1cee598bf80142f5126bd04dd341119454b

  • SHA256

    a81235bfa27fbeb78ac8236339d80016f2e45cc621eb154a5077045472df6f01

  • SHA512

    5a3ab0cae8de5b5ae72e20f399e3286ae19a3dfa1c9460dab56871243364f1fca9b91d075e8914f49c5b3ffacb26cd5adc8e9095bbd99369d871f2345dba1ae9

  • SSDEEP

    393216:mzPU5XrSsWeIcAYiP3hjvyamTt8UdIb0OMIZX+m8CaFyptugYDFuJx:mUhWeIj1vyampeSQOmwFypHYhuz

Score
7/10

Malware Config

Targets

    • Target

      p02fPXv.rar

    • Size

      17.4MB

    • MD5

      2244f05940898c038b1a5b0165671926

    • SHA1

      86e2b1cee598bf80142f5126bd04dd341119454b

    • SHA256

      a81235bfa27fbeb78ac8236339d80016f2e45cc621eb154a5077045472df6f01

    • SHA512

      5a3ab0cae8de5b5ae72e20f399e3286ae19a3dfa1c9460dab56871243364f1fca9b91d075e8914f49c5b3ffacb26cd5adc8e9095bbd99369d871f2345dba1ae9

    • SSDEEP

      393216:mzPU5XrSsWeIcAYiP3hjvyamTt8UdIb0OMIZX+m8CaFyptugYDFuJx:mUhWeIj1vyampeSQOmwFypHYhuz

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

    • Target

      config.toml

    • Size

      780B

    • MD5

      f5ec88df425e13717288aefb6f6bdbf1

    • SHA1

      1ede83c1df8a9f54d2f66dabd1ccca0b34b484bf

    • SHA256

      b5c1ff30db8d16ab078be8417b129656f85b1752abdd5f8a10ee3cda40ea68ef

    • SHA512

      900842b340d46e2294157ad893473d9ac40b63599a550086c1040d6574f43c89188db97d188ce0c16eaa93bae6e132d1ad3b50e9ebf07e4f06d0c0f009ff1ee0

    Score
    3/10
    behavioral3behavioral4

    • Target

      data/assets/config.json

    • Size

      45B

    • MD5

      849d0e24f93fa31ad505c3f0260cfe0d

    • SHA1

      85552dc3ea165c3b5d825982e30b095b32c0525b

    • SHA256

      ec30b087f23810eaf8135e9690af4c2802cda96a6b809e1791e625fd9e9fb430

    • SHA512

      d7c17825a186415ac3505a8b39cd6b279979bf85fe8e5901c143d7d8f6f2731f1b091aa603ceb92538af4483029544412fe34b2b9feb36054f24336790bdb9c5

    Score
    3/10
    behavioral5behavioral6

    • Target

      data/assets/soundboard.json

    • Size

      1KB

    • MD5

      c30ed256257c213dd6253373f9943625

    • SHA1

      710608a26b279117d5e22cefb0f028d18afdd19a

    • SHA256

      76beda061dcdeeff9531a258800e681dd4688e0a99421a3ff8f0a448a6bee54b

    • SHA512

      d3eedd39fc3d164eca55f4ef166594eff26fd6e87eadc39032cacb59a227ff455375bfe90f960ed6c006da5b68a9cba74a2fbbaf6fac9540916adc7a924b3ae9

    Score
    3/10
    behavioral7behavioral8

    • Target

      main.exe

    • Size

      17.5MB

    • MD5

      92f642212cdbe6ac3a8e6f48243a2489

    • SHA1

      6c5b3c6fa506dc92cd0bb4aa36dc4ccdac77a727

    • SHA256

      ef24286fb0f5c05f739109f955521ae44bc74b52414c05722a06daccc07ca4e6

    • SHA512

      0af07851e1d2f014efe2ca6a943999cb746fa595dca564b18d3226bbb4866f4c4c642d6eaa2126297cbcb11fdcaa6c721a24c44d678aa643e1e2a32029480e95

    • SSDEEP

      393216:oJT9O22UETklFz4Uu1u2u+rJvtNqe6ZNIllZEzhtMkQ:oJhTETklx4Uu1xfd1Km/EzhvQ

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral10behavioral9

    • Target

      output/filter/captcha.txt

    • Size

      12KB

    • MD5

      199f1f87360a90d73ceff39bcc291437

    • SHA1

      64a070a18fe52ff77b34f9ce761106d2792e12b4

    • SHA256

      0228c294e43ff45577961730238a472cce7fcf607deb17c593d426fa3b05d958

    • SHA512

      6588f9770c5e80a1a803b82e389e6ad36d3fac0899b05fe66ef8ecc396d5b805538f00d96872666d1d127bcb41783de0bb626dcc832fd06d5f5bf150ef94a5a9

    • SSDEEP

      192:zPJVFVcjv4OAeiIr1H/h8jvrKSAPJ/8HEcatF:zPJVFVcjQvDm+j2bPjVF

    Score
    1/10
    behavioral11behavioral12

    • Target

      output/filter/invalid.txt

    • Size

      8KB

    • MD5

      f1fa3c2243477fa9aafbe7380847301d

    • SHA1

      960bfc63f7f8af7818c19a15c129b1da52ac1e84

    • SHA256

      ddb2a42f09c14e100abed51492a4b6aa7455ebe58f4097837f95d49a85f3b864

    • SHA512

      258f1a72578ddc8c54f72e8968fe0e900fae7484b1645905834cf53f93f40a64f0f8e81b1c1e909550045bca108930fd53afe20163de607ef2c9ab2210e12be8

    • SSDEEP

      192:rkIFq8HF8/5oaDbtUonYbiPVM9Y+xWxVMYWke+Y82RJ7GcLVYCYoSdF12x+ep1DS:1hl8/53btnnYbiPVM9Y+xWxVMYWke+LZ

    Score
    1/10
    behavioral13behavioral14

MITRE ATT&CK Enterprise v15

Tasks